package servlets.admin.userManagement;
import dbProcs.Getter;
import dbProcs.Setter;
import jakarta.servlet.ServletException;
import jakarta.servlet.http.Cookie;
import jakarta.servlet.http.HttpServlet;
import jakarta.servlet.http.HttpServletRequest;
import jakarta.servlet.http.HttpServletResponse;
import jakarta.servlet.http.HttpSession;
import java.io.IOException;
import java.io.PrintWriter;
import org.apache.logging.log4j.LogManager;
import org.apache.logging.log4j.Logger;
import org.owasp.encoder.Encode;
import utils.ShepherdLogManager;
import utils.Validate;
/**
* This is the control class for the Assign Players to Class functionality
*
* This file is part of the Security Shepherd Project.
*
*
The Security Shepherd project is free software: you can redistribute it and/or modify it under
* the terms of the GNU General Public License as published by the Free Software Foundation, either
* version 3 of the License, or (at your option) any later version.
*
*
The Security Shepherd project is distributed in the hope that it will be useful, but WITHOUT
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR
* PURPOSE. See the GNU General Public License for more details.
*
*
You should have received a copy of the GNU General Public License along with the Security
* Shepherd project. If not, see .
*
* @author Mark Denihan
*/
public class AssignPlayers extends HttpServlet {
private static final long serialVersionUID = 1L;
private static final Logger log = LogManager.getLogger(AssignPlayers.class);
/**
* Initiated by assignPlayers.jsp. A number of players can be assigned to a new class. Changing
* the actual class of the player is handed by Setter.changePlayerClass
*
* @param classId The identifier of the class to add the players to
* @param players[] An array of player identifiers to add to the specified class
* @param csrfToken
*/
public void doPost(HttpServletRequest request, HttpServletResponse response)
throws ServletException, IOException {
// Setting IpAddress To Log and taking header for original IP if forwarded from proxy
ShepherdLogManager.setRequestIp(request.getRemoteAddr(), request.getHeader("X-Forwarded-For"));
log.debug("*** servlets.Admin.AssignPlayers ***");
PrintWriter out = response.getWriter();
out.print(getServletInfo());
response.setCharacterEncoding("UTF-8");
request.setCharacterEncoding("UTF-8");
HttpSession ses = request.getSession(true);
Cookie tokenCookie = Validate.getToken(request.getCookies());
Object tokenParmeter = request.getParameter("csrfToken");
if (Validate.validateAdminSession(ses, tokenCookie, tokenParmeter)) {
ShepherdLogManager.setRequestIp(
request.getRemoteAddr(),
request.getHeader("X-Forwarded-For"),
ses.getAttribute("userName").toString());
if (Validate.validateTokens(tokenCookie, tokenParmeter)) {
boolean notNull = false;
boolean validPlayer = false;
String[] classInfo = new String[2];
try {
log.debug("Getting ApplicationRoot");
String ApplicationRoot = getServletContext().getRealPath("");
log.debug("Servlet root = " + ApplicationRoot);
log.debug("Getting Parameters");
String classId = (String) request.getParameter("classId");
log.debug("classId = " + classId);
String[] players = request.getParameterValues("players[]");
;
log.debug("players = " + players.toString());
// Validation
notNull = (players != null);
log.debug("Ensuring strings are not empty");
if (classId.isEmpty()) {
log.debug("classId is empty; nulling");
classId = null;
}
if (notNull) {
if (classId != null) {
classInfo = Getter.getClassInfo(ApplicationRoot, classId);
if (classInfo[0] == null) {
classId = null;
}
}
if (classId == null) {
classInfo[1] = "Unassigned";
classInfo[0] = "Players";
}
for (int i = 0; i < players.length; i++) {
log.debug("Validating player " + players[i]);
validPlayer = Getter.findPlayerById(ApplicationRoot, players[i]);
}
}
if (notNull && validPlayer) {
// Data is good, Add user
log.debug("Updating Player Class");
String reponseMessage = new String();
for (int i = 0; i < players.length; i++) {
String userName = new String();
if (classId != null) {
userName = Setter.updatePlayerClass(ApplicationRoot, classId, players[i]);
} else {
userName = Setter.updatePlayerClassToNull(ApplicationRoot, players[i]);
}
if (userName != null) {
reponseMessage +=
""
+ Encode.forHtml(userName)
+ " assigned successfully to "
+ Encode.forHtml(classInfo[1] + " " + classInfo[0])
+ ".
";
} else {
reponseMessage +=
"User could not be updated. Please try again.
";
}
}
out.print(
"
Player Assignment Result
"
+ ""
+ reponseMessage
+ "
");
} else {
// Validation Error Responses
String errorMessage = "An Error Occurred: ";
if (!notNull) {
log.error("Null values detected");
errorMessage += "Invalid Request. Please try again";
} else if (!validPlayer) {
log.error("Player not found");
errorMessage += "Player(s) Not Found. Please try again";
}
out.print(
"
Player Assignment Failure
"
+ ""
+ Encode.forHtml(errorMessage)
+ "
");
}
} catch (Exception e) {
log.error("Assign Players Error: " + e.toString());
out.print(
"
Player Assignment Failure
"
+ ""
+ "An error Occurred! Please try again."
+ "
");
}
} else {
log.debug("CSRF Tokens did not match");
out.print(
"
Player Assignment Failure
"
+ ""
+ "An error Occurred! Please try again."
+ "
");
}
} else {
out.print(
"
Player Assignment Failure
An error"
+ " Occurred! Please try non administrator functions!
");
}
log.debug("*** AssignPlayers END ***");
}
}